{"metadata": {"vulnerability": "cve-2024-30052", "count": 60, "kinds": {"milestone": 9, "sighting": 26, "kev": 0, "other": 25}}, "data": [{"timestamp": "2024-03-22T23:12:13.409Z", "date_only": false, "value": "2024-03-22T23:12:13.409Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-30052", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:29.290Z", "date_only": false, "value": "2024-04-03T05:02:29.290269Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-30052", "record": "GSD-2024-30052", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-11T00:00:00Z", "date_only": true, "value": "2024-06-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0489", "record": "CERTFR-2024-AVI-0489", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30052", "record": "MSRC_CVE-2024-30052", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30052", "record": "MSRC_CVE-2024-30052", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30052", "record": "MSRC_CVE-2024-30052", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T07:00:00Z", "date_only": false, "value": "2024-06-11T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30052", "record": "MSRC_CVE-2024-30052", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-11T14:00:00Z", "date_only": false, "value": "2024-06-11T14:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2024-30052", "field": "containers.cna.datePublic"}, {"timestamp": "2024-06-11T17:00:10.658Z", "date_only": false, "value": "2024-06-11T17:00:10.658Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-30052", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-11T17:15:51Z", "date_only": false, "value": "2024-06-11T17:15:51Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7WVQ-94HQ-J88H", "record": "GHSA-7WVQ-94HQ-J88H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-11T17:15:51.600Z", "date_only": false, "value": "2024-06-11T17:15:51.600", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30052", "record": "FKIE_CVE-2024-30052", "field": "published"}, {"timestamp": "2024-06-11T18:18:10.131Z", "date_only": false, "value": "2024-06-11T18:18:10.131111Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0250", "record": "NCSC-2024-0250", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T18:18:10.131Z", "date_only": false, "value": "2024-06-11T18:18:10.131111Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0250", "record": "NCSC-2024-0250", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T18:18:10.131Z", "date_only": false, "value": "2024-06-11T18:18:10.131111Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0250", "record": "NCSC-2024-0250", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-11T18:30:46Z", "date_only": false, "value": "2024-06-11T18:30:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7WVQ-94HQ-J88H", "record": "GHSA-7WVQ-94HQ-J88H", "field": "published"}, {"timestamp": "2024-06-11T18:30:46Z", "date_only": false, "value": "2024-06-11T18:30:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7WVQ-94HQ-J88H", "record": "GHSA-7WVQ-94HQ-J88H", "field": "modified"}, {"timestamp": "2024-06-11T18:40:08.702Z", "date_only": false, "value": "2024-06-11T18:40:08.702742Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-30052", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-11T18:40:08.702Z", "date_only": false, "value": "2024-06-11T18:40:08.702742Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30052", "record": "FKIE_CVE-2024-30052", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-11T18:40:17.085Z", "date_only": false, "value": "2024-06-11T18:40:17.085Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-30052", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1338", "record": "WID-SEC-W-2024-1338", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1338", "record": "WID-SEC-W-2024-1338", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1338", "record": "WID-SEC-W-2024-1338", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-06-11T22:00:00Z", "date_only": false, "value": "2024-06-11T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1338", "record": "WID-SEC-W-2024-1338", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0489", "record": "CERTFR-2024-AVI-0489", "field": "last_revision_date"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0489", "record": "CERTFR-2024-AVI-0489", "field": "initial_release_date"}, {"timestamp": "2024-06-12T00:00:00Z", "date_only": false, "value": "2024-06-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0489", "record": "CERTFR-2024-AVI-0489", "field": "revisions.0.revision_date"}, {"timestamp": "2024-06-14T00:00:00Z", "date_only": true, "value": "2024-06-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-28701", "record": "CNVD-2024-28701", "field": "submitTime"}, {"timestamp": "2024-06-25T00:00:00Z", "date_only": true, "value": "2024-06-25", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-28701", "record": "CNVD-2024-28701", "field": "openTime"}, {"timestamp": "2024-08-02T01:25:02.976Z", "date_only": false, "value": "2024-08-02T01:25:02.976Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-30052", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:10:01.801Z", "date_only": false, "value": "2024-08-15T18:10:01.801+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1338", "record": "WID-SEC-W-2024-1338", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-04T20:40:05Z", "date_only": false, "value": "2024-10-04T20:40:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8678", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "c15f60fb-9c81-436d-a943-71562f71ad0c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aMaterials for CVE-2024-30052.\nURL\uff1ahttps://github.com/ynwarcs/CVE-2024-30052\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8678"}, {"timestamp": "2024-10-05T02:15:44Z", "date_only": false, "value": "2024-10-05T02:15:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/9199", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "354f0509-daac-48d0-a652-2dd7673ef5fe", "content": "Exploiting Visual Studio via dump files - CVE-2024-30052\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files", "url": "https://t.me/thebugbountyhunter/9199"}, {"timestamp": "2024-10-05T14:45:17Z", "date_only": false, "value": "2024-10-05T14:45:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1048", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "16d2fcbd-3b16-4609-9353-0ca165de9465", "content": "\u26a1\ufe0fExploiting Visual Studio via dump files - CVE-2024-30052.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1048"}, {"timestamp": "2024-10-05T14:45:17Z", "date_only": false, "value": "2024-10-05T14:45:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/25943", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "fb4af282-8fd7-410e-9748-fd3288bf1335", "content": "\u26a1\ufe0fExploiting Visual Studio via dump files - CVE-2024-30052.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/25943"}, {"timestamp": "2024-10-07T18:09:24Z", "date_only": false, "value": "2024-10-07T18:09:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11248", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "bb671683-4694-44ee-88c2-29ccbb3e09b2", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/CyberSecurityTechnologies/11248"}, {"timestamp": "2024-10-08T03:27:20Z", "date_only": false, "value": "2024-10-08T03:27:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/15395", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "ea75746a-b20f-4ab0-9fe2-17c11760eb01", "content": "\u200aRCE Vulnerability (CVE-2024-30052) Allow Attackers To Exploit Visual Studio via Dump Files\n\nhttps://gbhackers.com/cve-2024-30052-visual-studio-exploit/", "url": "https://t.me/HackingInsights/15395"}, {"timestamp": "2024-10-08T16:16:10Z", "date_only": false, "value": "2024-10-08T16:16:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/5270", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "c74ffb84-ecf3-43d8-89c3-c83e547e8287", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/ton618cyber/5270"}, {"timestamp": "2024-10-08T16:16:11Z", "date_only": false, "value": "2024-10-08T16:16:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ton618cyber/1808", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "0f8019ec-e1a6-4911-86c6-a9b5f354c843", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/ton618cyber/1808"}, {"timestamp": "2024-10-12T07:18:26Z", "date_only": false, "value": "2024-10-12T07:18:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/1060", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "3bd3bf0d-ad01-4a2b-aa19-fe07ed509c5b", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/CyberDilara/1060"}, {"timestamp": "2024-10-12T07:18:32Z", "date_only": false, "value": "2024-10-12T07:18:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3790", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "14290fb9-74c1-417d-b22c-323b231ea309", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/dilagrafie/3790"}, {"timestamp": "2024-10-12T07:18:52Z", "date_only": false, "value": "2024-10-12T07:18:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/InfoSecInsider/24064", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "63abbe12-f7b4-4b02-8fdc-cb35d00f0c68", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/24064"}, {"timestamp": "2024-10-12T07:18:53Z", "date_only": false, "value": "2024-10-12T07:18:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/495", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "06c53e6e-ae30-4421-a72f-6ab22087d5b7", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/InfoSecInsider/495"}, {"timestamp": "2024-10-12T07:18:59Z", "date_only": false, "value": "2024-10-12T07:18:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/7512", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "388bb8f0-033e-4b86-963f-2ab36539fbaa", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/7512"}, {"timestamp": "2024-10-12T07:18:59Z", "date_only": false, "value": "2024-10-12T07:18:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/8876", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "34720a71-2547-4a61-98a8-610e1c543c8d", "content": "Tools - Hackers Factory \n\n#exploit\n\n1. CVE-2024-20404: Cisco Finesse Web-Based Management Interface XSS/SSRF\n\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052: Exploiting Visual Studio via dump files\n\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353: Cisco IOS XE DoS\n\nhttps://github.com/codeb0ss/CVE-2\n\nThievingFox\n\nhttps://github.com/Slowerzs/ThievingFox/\n\n#Offensive_security\n\n1. RustiveDump - LSASS memory dumper using only NTAPIs\n\nhttps://github.com/safedv/RustiveDump\n\n2. cred1py - Python PoC for CRED1 over SOCKS5\n\nhttps://github.com/SpecterOps/cred1py\n\n3. Reverse SSH - SSH based reverse shell\n\nhttps://github.com/NHAS/reverse_ssh\n\nRepository for the NodeMedic-FINE tool (NDSS'24)\n\nhttps://github.com/NodeMedicAnalysis/NodeMedic-FINE\n\n#CyberDilara\nhttps://t.me/CyberDilara", "url": "https://t.me/GrayHatsHack/8876"}, {"timestamp": "2024-10-14T05:47:44Z", "date_only": false, "value": "2024-10-14T05:47:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/orderofsixangles/2474", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "858a3341-bde2-401d-b13a-b3a3108df31e", "content": "Exploiting AMD atdcm64a.sys arbitrary pointer dereference \u2013 Part 3\n\nLiving off Microsoft Copilot\n\nhunt down APTs\n\neBPF Crash Course for Beginners\n\nExploiting Visual Studio via dump files - CVE-2024-30052\n\nPowerShell Command History Forensics\n\nchill kernel hacking for fun\n\nSilently Install Chrome Extension For Persistence\n\nPopping Android Vulnerabilities From Notification to WebView XSS\n\nReverse Engineering Android Spyware ...with LaurieWired\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b KLEE 2024 workshop (1,2)\n\nFuzzing and Symbolic Execution for Multipath Malware Tracing: Bridging Theory and Practice via Survey and Experiments\n\nA collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID", "url": "https://t.me/orderofsixangles/2474"}, {"timestamp": "2024-10-14T18:06:17Z", "date_only": false, "value": "2024-10-14T18:06:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/5168", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "abc67ebb-fb3b-4db3-8f28-984e07e0eae3", "content": "Exploiting AMD atdcm64a.sys arbitrary pointer dereference \u2013 Part 3\n\nLiving off Microsoft Copilot\n\nhunt down APTs\n\neBPF Crash Course for Beginners\n\nExploiting Visual Studio via dump files - CVE-2024-30052\n\nPowerShell Command History Forensics\n\nchill kernel hacking for fun\n\nSilently Install Chrome Extension For Persistence\n\nPopping Android Vulnerabilities From Notification to WebView XSS\n\nReverse Engineering Android Spyware ...with LaurieWired\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b KLEE 2024 workshop (1,2)\n\nFuzzing and Symbolic Execution for Multipath Malware Tracing: Bridging Theory and Practice via Survey and Experiments", "url": "https://t.me/S_E_Reborn/5168"}, {"timestamp": "2024-10-17T21:17:40Z", "date_only": false, "value": "2024-10-17T21:17:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverse_dungeon/3789", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "b7b7ba8a-3ebb-437a-9f5d-0cb97b01df7a", "content": "Exploiting AMD atdcm64a.sys arbitrary pointer dereference \u2013 Part 3\n\nLiving off Microsoft Copilot\n\nhunt down APTs\n\neBPF Crash Course for Beginners\n\nExploiting Visual Studio via dump files - CVE-2024-30052\n\nPowerShell Command History Forensics\n\nchill kernel hacking for fun\n\nSilently Install Chrome Extension For Persistence\n\nPopping Android Vulnerabilities From Notification to WebView XSS\n\nReverse Engineering Android Spyware ...with LaurieWired\n\n\u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b KLEE 2024 workshop (1,2)\n\nFuzzing and Symbolic Execution for Multipath Malware Tracing: Bridging Theory and Practice via Survey and Experiments\n\nA collection of PowerShell scripts for analyzing data from Microsoft 365 and Microsoft Entra ID", "url": "https://t.me/reverse_dungeon/3789"}, {"timestamp": "2024-10-19T08:21:04Z", "date_only": false, "value": "2024-10-19T08:21:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RwY6Qx7q79BGFkuYNtskNo4YfaA4RR8J0sppT16Si3kAhAp8", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "c34f36e6-59ff-41e1-a7b3-587bb1d20add"}, {"timestamp": "2024-10-19T08:29:59Z", "date_only": false, "value": "2024-10-19T08:29:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ZeroEthical_Course/1773", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "998d8376-a507-47e7-b8ef-363ce0ef1c38", "content": "#exploit\n1. CVE-2024-20404:\nCisco Finesse Web-Based Management Interface XSS/SSRF\nhttps://github.com/AbdElRahmanEzzat1995/CVE-2024-20404\n\n2. CVE-2024-30052:\nExploiting Visual Studio via dump files\nhttps://ynwarcs.github.io/exploiting-vs-dump-files\n\n3. CVE-2024-20353:\nCisco IOS XE DoS\nhttps://github.com/codeb0ss/CVE-2024-20353-PoC", "url": "https://t.me/ZeroEthical_Course/1773"}, {"timestamp": "2025-05-16T01:34:25Z", "date_only": false, "value": "2025-05-16T01:34:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16597", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "28ff575a-2b2a-4bd6-9aef-81e8383276f5", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-30052\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Visual Studio Remote Code Execution Vulnerability\n\ud83d\udccf Published: 2024-06-11T17:00:10.658Z\n\ud83d\udccf Modified: 2025-05-16T00:13:06.475Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30052", "url": "https://t.me/DarkWebInformer_CVEAlerts/16597"}, {"timestamp": "2025-10-01T18:11:56Z", "date_only": false, "value": "2025-10-01T18:11:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "556c10b4-43f4-46bd-98ac-de12d76fda48"}, {"timestamp": "2025-10-08T21:59:27Z", "date_only": false, "value": "2025-10-08T21:59:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "94701998-a11e-40ed-b2f1-395062df6473"}, {"timestamp": "2025-12-17T22:23:14.752Z", "date_only": false, "value": "2025-12-17T22:23:14.752Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-30052", "record": "MSRC_CVE-2024-30052", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-20T16:16:44.907Z", "date_only": false, "value": "2026-07-20T16:16:44.907", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30052", "record": "FKIE_CVE-2024-30052", "field": "lastModified"}, {"timestamp": "2026-07-29T12:02:10.412Z", "date_only": false, "value": "2026-07-29T12:02:10.412696Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4763", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "cbade68f-037e-4ba2-80e3-3dc8461f420f", "url": "https://t.me/reverseame/4763"}, {"timestamp": "2026-07-30T00:02:17.758Z", "date_only": false, "value": "2026-07-30T00:02:17.758396Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4763", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "f990a9e2-b659-4841-bdc6-f81f7edfd6f3", "url": "https://t.me/reverseame/4763"}, {"timestamp": "2026-08-02T04:04:24.049Z", "date_only": false, "value": "2026-08-02T04:04:24.049373Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4763", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "4f871391-0d57-402e-adf4-37f0985b9aa8", "url": "https://t.me/reverseame/4763"}, {"timestamp": "2026-08-03T02:13:58.895Z", "date_only": false, "value": "2026-08-03T02:13:58.895868Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4763", "record": "CVE-2024-30052", "field": "creation_timestamp", "uuid": "05d0b13e-be20-4827-9098-d02725cacdf0", "url": "https://t.me/reverseame/4763"}, {"timestamp": "2026-08-10T15:12:31.251Z", "date_only": false, "value": "2026-08-10T15:12:31.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-30052", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:12:31.251Z", "date_only": false, "value": "2026-08-10T15:12:31.251Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2024-30052", "field": "containers.cna.providerMetadata.dateUpdated"}]}